$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft File: tjIT2OZi9FS-rux_PELjr2-JX7I.mft (raw, json) Hash identifier: t2cCeWVZrnil0mmC9HPJpUVrZ1D+YJsInte9JzdfiYk= Subject key identifier: 06:9B:AC:2C:0F:BB:F0:6F:AB:F6:4E:7E:A6:53:FD:FC:29:2C:26:2F Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 Certificate issuer: /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Certificate serial: 04C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft Manifest number: 04AB Signing time: Tue 22 Sep 2026 23:33:36 +0000 Manifest this update: Tue 22 Sep 2026 23:33:35 +0000 Manifest next update: Tue 29 Sep 2026 23:33:35 +0000 Files and hashes: 1: tjIT2OZi9FS-rux_PELjr2-JX7I.crl (hash: cqVQMhNiK86tBN9fibN7xv9JQRiMQqB7FrYyn+Ox3QY=) 2: E6B9A5DA95F611EC88E42C7EC4F9AE02.roa (hash: 06opqbAigPxpeoeKrY3XTLUmvBCL1e7zcB701WZYE7c=) 3: 4A7E1926947511EC9795DF56C4F9AE02.roa (hash: YLvOpo/gAJOyi4aEbUEuHHlI1c0Z1SZvTOBlRFCy2+E=) 4: E61E258895F611EC88E42C7EC4F9AE02.roa (hash: 9Fd943GuQnIJTghRawSBwpY1MlmUVR4OO3uXynSyRN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1221 (0x4c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Validity Not Before: Sep 22 23:33:35 2026 GMT Not After : Sep 29 23:33:35 2026 GMT Subject: CN=6ab31050-26af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:68:76:1f:7f:ec:c4:b3:dc:7a:b2:ec:89:8d: 93:37:82:04:58:29:d0:28:2a:ff:6a:c4:bc:43:aa: 24:88:85:44:68:a8:b6:bb:4b:93:1a:23:47:28:c0: 02:e0:c9:df:22:89:5b:34:31:6d:d6:f6:9e:ea:2e: 45:f8:5a:1a:77:6e:78:0f:3b:a3:48:5c:22:9a:d9: 04:d0:e2:3f:16:24:31:ac:2a:5e:96:e9:cf:26:a0: 61:5c:66:c5:cb:26:66:68:57:97:9b:f3:19:c4:77: 33:39:c1:5f:47:cb:8a:b2:71:2d:b2:be:ef:ce:0d: 49:a6:12:05:6f:8c:52:07:02:7a:45:b9:28:e9:a1: 5c:4b:3c:cd:fb:a1:9d:0e:0b:a2:1e:b1:93:59:06: f4:4c:27:d8:90:90:f9:83:dc:cd:62:df:3c:a0:e1: 3d:0c:c6:fd:69:2a:6c:1b:7d:32:28:e6:99:77:c5: f5:02:05:e2:3f:0f:b6:e4:c0:4c:13:54:6d:f7:e9: aa:60:9b:94:99:cc:17:bd:9d:85:b8:aa:18:ec:0b: 48:12:c7:c8:35:bb:53:c3:38:2c:08:97:d4:ed:88: 37:14:f0:e1:a7:9e:61:07:13:b2:ec:70:cb:e8:8e: aa:d8:87:cf:f7:de:c2:0d:7a:09:4d:53:1b:3f:59: a8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9B:AC:2C:0F:BB:F0:6F:AB:F6:4E:7E:A6:53:FD:FC:29:2C:26:2F X509v3 Authority Key Identifier: keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:90:b5:2d:d5:cd:00:02:26:8f:5e:5a:ea:60:4d:71:cf:49: ae:bf:03:53:84:7a:cf:6f:9c:d0:fe:b3:eb:4b:24:0f:96:e3: de:06:d0:47:ae:8c:4d:b1:bf:3c:37:7b:92:4b:90:f1:8f:3f: 9e:b1:e5:f0:ff:19:e8:f7:93:92:f2:fa:c6:ab:53:cb:c9:00: f3:23:81:1f:c8:99:2a:55:7a:55:0f:0f:ed:7f:ae:e7:08:6d: 86:c0:9b:44:58:63:5b:3b:52:24:1a:76:b4:a0:0b:1a:11:93: f2:fa:2e:94:24:49:ac:85:1c:6b:78:1a:37:76:2e:ac:14:d5: 9b:d0:c5:a9:dc:2c:b5:0a:0e:ff:95:9e:0c:5b:93:a1:61:57: ad:40:fc:48:04:53:9c:a6:7b:a9:51:28:ef:f3:d3:f5:f0:40: 8f:88:41:81:f7:41:db:be:47:a8:fb:4b:c4:ac:2a:19:4f:eb: dd:4a:a2:e0:b5:99:58:8b:76:81:06:2c:f4:d4:89:8f:5b:d9: 7c:aa:fc:92:ee:7b:5f:78:be:b4:55:65:c2:84:2e:0a:d4:ed: a8:5b:30:cf:5a:6a:ab:c4:33:c3:7b:f1:4e:a1:09:f6:97:a6: 67:5b:b2:0e:7a:b1:72:10:3e:50:3f:21:d3:9d:2a:6b:a8:45: 40:e1:69:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMjAxMTAvBgNVBAUTKEI2MzIxM0Q4RTY2MkY0NTRCRUFFRUM3RjNDNDJFM0FG NkY4OTVGQjIwHhcNMjYwOTIyMjMzMzM1WhcNMjYwOTI5MjMzMzM1WjAYMRYwFAYD VQQDEw02YWIzMTA1MC0yNmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmh2H3/sxLPcerLsiY2TN4IEWCnQKCr/asS8Q6okiIVEaKi2u0uTGiNHKMAC 4MnfIolbNDFt1vae6i5F+Foad254DzujSFwimtkE0OI/FiQxrCpelunPJqBhXGbF yyZmaFeXm/MZxHczOcFfR8uKsnEtsr7vzg1JphIFb4xSBwJ6Rbko6aFcSzzN+6Gd DguiHrGTWQb0TCfYkJD5g9zNYt88oOE9DMb9aSpsG30yKOaZd8X1AgXiPw+25MBM E1Rt9+mqYJuUmcwXvZ2FuKoY7AtIEsfINbtTwzgsCJfU7Yg3FPDhp55hBxOy7HDL 6I6q2IfP997CDXoJTVMbP1moYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAabrCwP u/Bvq/ZOfqZT/fwpLCYvMB8GA1UdIwQYMBaAFLYyE9jmYvRUvq7sfzxC469viV+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAyMC9CRTFFRTUwNDk0 NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlGUy1ydXhfUEVManIyLUpY N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqSVQyT1ppOUZTLXJ1eF9QRUxqcjItSlg3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAyMC9CRTFFRTUwNDk0NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlG Uy1ydXhfUEVManIyLUpYN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiJC1LdXNAAImj15a6mBNcc9Jrr8DU4R6z2+c0P6z60skD5bj3gbQR66MTbG/ PDd7kkuQ8Y8/nrHl8P8Z6PeTkvL6xqtTy8kA8yOBH8iZKlV6VQ8P7X+u5whthsCb RFhjWztSJBp2tKALGhGT8voulCRJrIUca3gaN3YurBTVm9DFqdwstQoO/5WeDFuT oWFXrUD8SARTnKZ7qVEo7/PT9fBAj4hBgfdB275HqPtLxKwqGU/r3Uqi4LWZWIt2 gQYs9NSJj1vZfKr8ku57X3i+tFVlwoQuCtTtqFswz1pqq8Qzw3vxTqEJ9pemZ1uy DnqxchA+UD8h050qa6hFQOFp5g== -----END CERTIFICATE-----Generated at Thu Sep 24 20:14:00 2026 by rpki-client